Microsoft Windows DirectWrite Application Denial of Service Vulnerability

Last Update Date: 14 Mar 2012 12:19 Release Date: 14 Mar 2012 4270 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

A denial of service vulnerability exists in the way that DirectWrite renders a specially crafted sequence of Unicode characters. An attacker who successfully exploited this vulnerability could cause a target application to stop responding.

Impact

Denial of Service

System / Technologies affected

Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/ms12-019

Vulnerability Identifier

CVE-2012-0156

Source

Microsoft